FPII-2140:Fix some permission issue at latest release
Change-Id: Ie9e070dff2c618503e42b4c2ec56f3da1d7d54ab
diff --git a/common/installd.te b/common/installd.te
index 9d7d12b..082bb76 100644
--- a/common/installd.te
+++ b/common/installd.te
@@ -1,3 +1,4 @@
allow installd location_app_data_file:dir { relabelto create_dir_perms };
allow installd location_app_data_file:lnk_file create_file_perms;
allow installd location_app_data_file :{ file sock_file fifo_file } { getattr unlink rename relabelfrom relabelto setattr };
+allow installd location_app_data_file:lnk_file {relabelto};
diff --git a/common/thermal-engine.te b/common/thermal-engine.te
index 234708a..f66b8d3 100644
--- a/common/thermal-engine.te
+++ b/common/thermal-engine.te
@@ -22,6 +22,8 @@
allow thermal-engine sysfs_thermal:file rw_file_perms;
allow thermal-engine sysfs_thermal:lnk_file read;
allow thermal-engine sysfs:file write;
+allow thermal-engine sysfs_battery_supply:dir search;
+allow thermal-engine sysfs_battery_supply:file {open read};
#This is required for qmi access
qmux_socket(thermal-engine);
allow thermal-engine sysfs_mpdecision:file rw_file_perms;
diff --git a/common/wcnss_service.te b/common/wcnss_service.te
index 85d566e..be8f639 100644
--- a/common/wcnss_service.te
+++ b/common/wcnss_service.te
@@ -14,6 +14,7 @@
allow wcnss_service system_prop:property_service set;
allow wcnss_service persist_file:dir r_dir_perms;
+allow wcnss_service persist_file:file setattr;
qmux_socket(wcnss_service);
allow wcnss_service self:socket create_socket_perms;
@@ -22,7 +23,7 @@
# allow wpa_supplicant to send back wifi information to cnd
allow wcnss_service cnd:unix_dgram_socket sendto;
-allow wcnss_service self:capability { setuid setgid dac_override net_admin };
+allow wcnss_service self:capability { setuid setgid dac_override net_admin chown};
allow wcnss_service self:netlink_socket create_socket_perms;
allow wcnss_service firmware_file:dir r_dir_perms;